Re: Rust in-kernel TLS handshake

["Vincenzo Palazzo" <vincenzopalazzodev@gmail.com>]

This sounds pretty exciting, and I think to play with it a little 
the bit will help to see what the future looks like, also this 
seems a really good use case of rust in the Kernel.     

Let me know if there is a need for help, I had some free time in  
the next coming months.                                                                                                                                                                        
Cheers!
                                                                                                                                                                                               
Vincent.

On Wed Dec 28, 2022 at 2:33 AM CET, FUJITA Tomonori wrote:
> Hi,
>
> I've started in-kernel TLS handshake implementation in Rust.
> https://github.com/fujita/rust-tls
>
> There is some debate over in-kernel TLS handshake mainly because of
> the complexity. I'd like to see if Rust could help with auditing such
> complicated security-relevant code in the kernel.
>
> I worked on QUIC as a consumer of TLS. This can establish a QUIC connection
> with Quinn's example client, Rust QUIC implementation. Only minimum
> server side functionality and connection establishment are supported.
>
> From the perspective of Rust-for-Linux, the main work is implementing
> APIs for crypto subsystem. Also libraries such as working with buffers
> (like Tokio's bytes) would be helpful, I think (should be useful for
> other projects). I'll work for mainline. Meanwhile you can compile
> this kernel module
> with my fork.
>
> Opinions?
>
> Resend due to a delivery issue. Sorry if you got this twice.